[N] citation is a clickable link.
Beyond briefings, the Hunt tab turns any saved report into structured, citation-grounded threat hunting hypotheses and merges a selection into one consolidated, filterable HTML dashboard — usable with either a metered API key or a local Claude Code subscription login.
Features
97 Built-in Security Feeds
Across 6 categories: IOC Feeds, Vulnerabilities, Threat Intel, Red|Blue|Purple, Security News, CTF & Learning.
Real RSS/Atom Ingestion
Articles fetched and parsed server-side, filtered to your date window before Claude sees them.
Inline Citations
Every factual claim is followed by
[N] badges linking to the source article. References rebuilt from the source map — no duplicates.4 Export Formats + Bulk
Markdown, HTML, PDF (dark theme, print-ready), DOCX. Bulk-export one, several, or all reports at once.
Threat Hunt Hypotheses
Derive citation-grounded hunting hypotheses from any saved report. Merge into one consolidated, filterable HTML dashboard (light or dark theme).
Claude Subscription Auth
Extract hypotheses via a local, logged-in Claude Code CLI — no API billing, no key needed for Hunt tab.
Feed Management
Enable, disable, rename, re-point, or permanently delete any feed. Edit custom feeds in place.
Config Export / Import
Snapshot and restore your entire configuration (feeds, preferences) as JSON.
Cost Tracking
Per-run token usage, actual vs. estimated cost accuracy, and 30-day budget projections.
4 Claude Models
Haiku 4.5 (default), Sonnet 4.5, Sonnet 4.6, Opus 4.5.
Report Sections
Every generated briefing follows this structure:Hunting Hypotheses (HUNT Tab)
The 🎯 HUNT tab turns already-saved reports into structured, actionable threat hunting hypotheses, then merges a selection into one consolidated interactive HTML dashboard.- Select one or more saved reports (checkboxes).
- Click ⚡ GENERATE CONSOLIDATED HTML — this extracts hypotheses for any that don’t have them yet, then merges everything into a single downloadable file with category and date filters.